Design Solutions That Align with the Microsoft Cybersecurity Reference Architectures (MCRA) and Microsoft Cloud Security Benchmark (MCSB) SC-100 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   A security architect is designing protections against insider threats. Which strategy aligns with the MCRA's best practices for insider threat protection?

   • ADisable all logging to protect user privacy and avoid false accusations.
   • BImplement user and entity behavior analytics (UEBA) to detect anomalous activities that may indicate malicious or accidental insider actions.
   • CRely solely on perimeter firewalls to block external threats, assuming insiders are always trustworthy.
   • DGrant all employees full access to all resources to avoid friction and then monitor everything manually.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A financial services company is concerned about insider threats from employees with access to sensitive customer data. The security architect is designing a solution aligned with the MCRA that detects and mitigates risky behavior without disrupting legitimate work. The company wants to enforce least privilege and use automated responses. Which combination of controls should the architect recommend?

   • AUse Azure AD Privileged Identity Management (PIM) for just-in-time access and Microsoft Purview Insider Risk Management to detect risky user activities.
   • BDeploy Azure Information Protection to label all sensitive documents and block external sharing.
   • CImplement Azure AD Conditional Access to require MFA for all users and block access from personal devices.
   • DAssign permanent administrative roles to a small group of trusted users and monitor their activity with Azure Monitor logs.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A government agency is deploying an AI system that processes classified data. The security architect must align with the Microsoft Cloud Security Benchmark (MCSB). The agency requires that the AI system be protected against data exfiltration and that access is strictly controlled. Which combination of MCSB controls should be implemented?

   • AEnable Azure Monitor and Application Insights for logging.
   • BUse Azure Policy to enforce tagging and resource naming conventions.
   • CDeploy Azure DDoS Protection and a web application firewall (WAF).
   • DUse Azure Confidential Computing for data processing and Azure AD Conditional Access with device compliance for access control.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A multinational bank is designing a security architecture aligned with the MCRA. The bank has a high-risk insider threat environment and wants to implement Zero Trust. The security architect must balance the need for strong insider threat detection with the requirement to minimize false positives that could disrupt legitimate work. Which approach best balances these requirements?

   • AEnable all Microsoft Defender for Cloud Apps anomaly detection policies and automatically block all flagged activities.
   • BUse Azure AD Identity Protection to block all users with medium or higher risk.
   • CImplement a SIEM solution with custom correlation rules for all user activity.
   • DDeploy Microsoft Purview Insider Risk Management with policies tuned to high-risk behaviors and require approval for high-risk actions.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   What is the primary purpose of the Microsoft Cloud Security Benchmark (MCSB) when applied to AI solutions?

   • ATo provide a pricing model for AI services in Azure.
   • BTo define the maximum performance metrics for AI models.
   • CTo replace the need for any other security controls in AI environments.
   • DTo provide a set of security controls and best practices that help protect AI workloads and data.
   Reveal Solution Discussion Select an answer first